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IN THE CLAIMS) 

Claims 1-17. (Cancel) 

18. (Currently Amended) A method executed in an arrangement including a 
network that supports assigning systems to specified VPNs, which systems connect to 
ed ge routers of the network, which network includes collection, comprising one or more 
devices, that operates to insure that systems A and B of said systems that are each 
assigned to one or more VPNs but which have no commonly assigned VPN cannot 
communicate widi each other, comprising the steps of: 

receiving a message from an application of a type for which inter- VPN 

communication is allowed, indicating a desire to establish communication between said 
systems A and B; 

directing said collection to install a modification having whose effect is to allow 

communication between said systems A and B: and 

directing said collection to remove said modification at a later time to reinstate 

prohibition against communication between said systems A and B; 

where said directing said collection to install a modification comprises a step of 
installing a entry in a VPN route and forward (VRD table that is associated with edge 
router A of said edge routes through which said system A is coupled to said network, and 
installing an entry in a VRF table that is associated with edge router B of said edge routes 
through which said system B is coupled to said network; and 

^h^me4he d of claim 17 where said entry that is installed in said VRF associated 
with said edge router A comprises an indication that system B belongs to a VPN to which 
system A belongs, and said entry that is installed in said VRF associated with said edge 
router B comprises an indication that system A belongs to a VPN to which system B 
belongs. 

19. (Previously Presented) The mediod of claim 18 where said entry that is 
installed in said VRF associated with said edge router A further comprises a route 
indication for reaching system B, and said entry that is installed in said VRF associated 
with said edge router B further comprises a route indication for reaching system A. 
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20- (Previously Presented) The method of claim 18 where said entry that is 
installed in said VRF associated with said edge router A further comprises a route 
criterion for limiting traffic that is destined to system B solely to traffic that pertains to 
said application. 

21. (Cancel) 
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